HELP - I think I was just Hacked!



Oh my god, the absolute scariest thing just happened to me...

I was working on my server (logged in as a regular user), and I went to su, and got the message "who are you?", instead of the usual password prompt. I typed "whoami" and got "10000" - an ID, NOT my login name (which I would normally get).

I logged out, couldn't log back in... I went to webmin and noticed that usernames had been deleted... my username, the mysql username (and I don't know what else, yet). I had to recreate them. The root password had been reset to blank (and the port moved from a custom port back to 22)..

I am absolutely freaked out - I'm using 6.3-RELEASE-p1 (the latest) and I don't know what happened... It all happened right there while I was working on the server (and no - I'm 100% sure that I didn't accidentally do something stupid myself). I've changed the root password and username password, but this isn't going to solve how the person got in (assuming it was more sophisticated than a password guess).

Any ideas... has anyone ever heard of something like this before? Quick typing so I'm sure there's typos, sorry.

.



Relevant Pages

  • The Rockin Eve is coming
    ... not even as in I am a god. ... Grand. ... To get the new topics going: Practice typing in the dark (you won't ... Wagging your eyes at me after saying they'll fix the computer ...
    (sci.med.diseases.lyme)
  • Re: ALTER design (Was: Code problems with Perform Thru Exit causes fall through)
    ... you is a small amount of typing. ... They're just so easy to change, especially when you have a system that has lots of convoluted business rules to placate different user groups... ... A man who believes in a God he doesn't see, ...
    (comp.lang.cobol)
  • Re: Compendium
    ... God! ... Our Aunt told us not to take typing because if we knew how to type the ... I always thought it was fairly sound advice, ...
    (soc.motss)
  • Re: Ready to abandon "Pages"
    ... Macintosh is too hard for people on drugs. ... Dear God! ... Open a BLANK template and start typing. ...
    (comp.sys.mac.apps)
  • Re: Passing a Runtime Parameter to a VB6 EXE: How To?
    ... "Rick Rothstein" skrev i meddelandet ... > This should be a clickable link for the above... ... Thank God for that! ... I like typing, but that's just rediculous! ...
    (microsoft.public.vb.general.discussion)